PT-2019-18010 · Lenovo · Lenovo Xclarity Administrator

Name of the Vulnerable Software and Affected Versions: Lenovo XClarity Administrator versions prior to 2.5.0 Description: A stored CSV Injection issue was reported that could allow an administrative user to store malformed data in Jobs and Event Log data. This could result in crafted formulas bei...

DjVuLibre Buffer Overflow Vulnerability

DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A buffer overflow vulnerability exists in DjVuLibre version 3.5.27, which can be exploited by an attacker to cause a buffer...

WordPress twitter-cards-meta plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site request forgery vulnerability exist...

CVE-2019-13572

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

CVE-2019-14456

Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system connected to a serial port on an Opengear console server sends crafted text to a serial port that has logging enabled, the text will b...

Red Hat Enterprise Linux Resource Management Error Vulnerability

Red Hat Enterprise Linux RHEL is a set of Linux operating system for enterprise users from the American company Red Hat Red Hat. A resource management error vulnerability exists in Red Hat RHEL version 7.5, which can be exploited by an attacker to cause a denial of service...

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27771)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

BlackBerry QNX Software Development Platform Information Disclosure Vulnerability (CNVD-2019-23834)

BlackBerry QNX Software Development Platform is a suite of QNX software development platforms from BlackBerry Canada. The platform is mainly used to develop software based on the QNX platform. An information disclosure vulnerability exists in BlackBerry QNX Software Development Platform 6.5.0 SP1...

PT-2019-19301 · Blackberry · Blackberry Qnx Software Development Platform

Name of the Vulnerable Software and Affected Versions: BlackBerry QNX Software Development Platform versions 6.5.0 SP1 and earlier Description: The issue is related to an information disclosure vulnerability in the procfs service of the BlackBerry QNX Software Development Platform. This...

Eventum Cross-Site Scripting Vulnerability (CNVD-2019-39387)

Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the /htdocs/popup.php file in Eventum version 3.5.0. The vulnerability stems from a lack of proper validation of client-side...

MSI installer for Python code execution vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, supports multiple platforms, etc. MSI installer for Python is a Windows-based Python installer. A security vulnerability exists in MSI...

PT-2019-17016 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 10.5 Description: A remote attacker could upload arbitrary files, potentially allowing the execution of arbitrary code on the vulnerable web server. Recommendations: For IBM Security Guardium version 10.5, update...

Foxit PDF SDK ActiveX License Issue Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions, which stems from a lack o...

Foxit PDF SDK ActiveX Buffer Overflow Vulnerability (CNVD-2019-21947)

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. A remote attacker can...

Symantec Data Loss Prevention Cross-Site Scripting Vulnerability

Symantec Data Loss Prevention DLP is a set of data leakage prevention solutions from Symantec Symantec. The product is mainly used to discover, monitor and protect sensitive data and so on. A cross-site scripting vulnerability exists in Symantec DLP 15.5 MP1 and earlier versions. The vulnerabilit...

Foxit PDF SDK ActiveX File Write Vulnerability

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. Foxit PDF SDK ActiveX 5.5.0 and earlier versions in the use of JavaScript API Doc.exportAsFDF file...

Foxit PDF SDK ActiveX Command Injection Vulnerability (CNVD-2019-21955)

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. A command injection vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. The...

UBUNTU-CVE-2019-11356

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name...

SQL Injection Vulnerability in Tpshop v3.5 Sm***.php Page

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Sm.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Tpshop v3.5 Or***.php Page

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Or.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...